a68a853fdb8d2d5ed774bb57a5511984[.]exe | Triage

Sharing

General

Target

a68a853fdb8d2d5ed774bb57a5511984.exe
Size

81KB
MD5

a68a853fdb8d2d5ed774bb57a5511984
SHA1

4a0290dd5d4b5611a098f58cfc2bb0b3dab878a4
SHA256

a1422d78eccbfe84a145cce093bfacf4b5e0e5cf81f1ce82a94c35ffa4172ecd
SHA512

5be530397719e4cf1920d74ac7befd20a433d9b91c42ad6713164b4f9b6620260451f41ee1e31dea1198d5e7affff60756e602de3790b85b4d3e8eeb72120b43
SSDEEP

1536:IAbFlbgwBPLqmQIsUDQvPp6CtZEhG6SufhiciljtIu3Li6TdY:IAbF9gwBPLzwsQHp6CHEhzSuJxizI0e6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a68a853fdb8d2d5ed774bb57a5511984.exe

Files

a68a853fdb8d2d5ed774bb57a5511984.exe
.exe windows x86

c2e4487f461edff82f81a902e3e4f0b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
memset
strlen
malloc
strtok_s
atexit
memcmp

kernel32

lstrcatA
lstrlenA
GetCurrentProcessId

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ